Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/e896b42e-3604-36e3-9250-5d2c652fd702.roa
File:                     e896b42e-3604-36e3-9250-5d2c652fd702.roa (raw, json)
Hash identifier:          K+6kLekl2STLWL6Xpg7IDutSQP4hpKcblX7oFyrreik=
Subject key identifier:   0D:24:8A:D2:1A:1D:F2:EC:A2:6E:DB:43:1D:80:B6:C3:62:6B:3B:7D
Certificate issuer:       /CN=d7f4f613-8c96-4684-828f-f2c0fe9dc475
Certificate serial:       010D0C9F4328584633963E5C79E5F5FA26BB4A80
Authority key identifier: 74:20:59:EA:75:8B:1E:12:98:0A:5A:07:8D:33:07:84:8E:85:84:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/e896b42e-3604-36e3-9250-5d2c652fd702.roa
Signing time:             Thu 13 Jun 2024 22:01:58 +0000
ROA not before:           Thu 13 Jun 2024 22:01:58 +0000
ROA not after:            Wed 11 Sep 2024 22:01:58 +0000
asID:                     46781
IP address blocks:        104.224.10.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:96:3e:5c:79:e5:f5:fa:26:bb:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7f4f613-8c96-4684-828f-f2c0fe9dc475
        Validity
            Not Before: Jun 13 22:01:58 2024 GMT
            Not After : Sep 11 22:01:58 2024 GMT
        Subject: CN=55b006d0-bce5-4221-8aab-ef0f06edcacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:58:92:55:12:d9:52:76:88:6b:46:ce:94:15:
                    d2:1b:b9:3d:58:ce:a7:f2:d0:db:13:0c:15:6b:6a:
                    60:c4:62:47:2a:3c:fe:98:e2:e8:77:4f:d0:17:69:
                    4d:38:34:02:26:86:8f:cb:ca:74:97:b0:a4:e3:c1:
                    e9:fb:6a:73:df:21:8b:f6:b3:70:8e:53:25:87:3e:
                    c1:f7:52:45:33:4f:ca:2d:36:a8:32:be:35:8d:63:
                    73:e3:5a:b5:10:1b:d0:8d:b0:ed:4a:e0:c6:13:8a:
                    9a:15:19:08:03:03:7e:a1:56:4c:ac:92:d4:44:19:
                    af:96:7b:93:8b:9a:87:d3:e8:92:f5:85:72:0e:ab:
                    90:68:f9:38:f1:e8:b0:f4:e9:78:b8:77:06:4f:ef:
                    48:fc:b3:d7:00:59:09:b1:f9:ec:31:df:c1:81:5b:
                    bc:4f:88:15:93:2e:77:37:2a:e2:2a:76:b5:62:9a:
                    b3:25:03:21:e7:c2:bd:b8:0c:62:26:43:e7:aa:c1:
                    42:49:ce:4e:09:f1:6b:11:29:cd:f9:dc:cc:13:00:
                    16:d5:ed:01:c1:20:7e:2d:67:16:bb:ff:89:0e:88:
                    b8:ac:87:d8:86:08:33:73:94:ac:0b:51:26:9f:ef:
                    ee:bb:fb:b1:02:69:fe:f3:31:34:63:c3:d1:ec:92:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:24:8A:D2:1A:1D:F2:EC:A2:6E:DB:43:1D:80:B6:C3:62:6B:3B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/e896b42e-3604-36e3-9250-5d2c652fd702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475/d7f4f613-8c96-4684-828f-f2c0fe9dc475.crl

            X509v3 Authority Key Identifier:
                keyid:74:20:59:EA:75:8B:1E:12:98:0A:5A:07:8D:33:07:84:8E:85:84:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7f4f613-8c96-4684-828f-f2c0fe9dc475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:58:98:ab:78:7c:e1:27:8b:c4:23:56:6e:05:b1:68:74:78:
         95:8e:b4:04:fa:a7:fa:f4:af:4e:a2:d7:56:80:d4:7d:3b:ca:
         61:c3:35:e9:a8:ad:30:f4:2c:fa:67:2d:49:64:b7:c1:3b:5e:
         31:a3:4f:27:c0:63:69:a4:02:d6:00:0a:e8:91:f5:ca:0d:79:
         bf:24:a4:04:20:d4:9b:44:55:5f:3a:0e:38:f8:a1:b2:2f:69:
         e9:b8:5d:a8:0b:71:50:c2:6f:26:e7:77:24:4f:05:54:56:a0:
         99:a1:f5:cc:25:b9:ac:28:9f:81:30:a5:fd:f4:0f:08:4b:f7:
         54:e0:b4:9c:b0:e0:22:28:cf:31:27:9e:06:3a:4e:fb:97:f5:
         9f:39:e7:1b:f7:ce:dd:b8:49:7d:df:a1:18:f7:18:0a:30:76:
         3c:13:54:f5:54:b8:77:71:0a:c8:94:4f:05:9a:5d:b3:0a:7e:
         4e:e4:2b:97:ba:3e:c8:dd:1c:33:a0:25:8b:e6:ae:ec:9f:af:
         9b:99:d6:13:8d:73:e7:8b:9e:cd:fe:fc:4c:6f:f4:0c:56:f0:
         25:d2:07:07:e1:58:3c:ae:42:26:78:4d:06:16:cd:eb:56:dd:
         d1:15:5f:1c:20:8a:6e:52:30:60:58:27:33:e4:23:0b:45:ca:
         aa:5b:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:09:03 2025 by rpki-client